BID:11581

RARLAB WinRAR Repair Archive Undisclosed Vulnerability

Info

RARLAB WinRAR Repair Archive Undisclosed Vulnerability

Bugtraq ID:	11581
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	Nov 02 2004 12:00AM
Updated:	Nov 02 2004 12:00AM
Credit:	Discovery of this vulnerability is credited to Peter Winter-Smith of NGSSoftware.
Vulnerable:	RARLAB WinRar 3.40 RARLAB WinRar 3.20 RARLAB WinRar 3.11 RARLAB WinRar 3.10 beta 5 RARLAB WinRar 3.10 beta 3 RARLAB WinRar 3.10 beta 3 RARLAB WinRar 3.10 RARLAB WinRar 3.0 .0 RARLAB WinRar 3.0 RARLAB WinRar 2.90

Not Vulnerable:	RARLAB WinRar 3.41

Discussion

RARLAB WinRAR Repair Archive Undisclosed Vulnerability

RARLAB WinRAR is reported prone to an undisclosed vulnerability. The issue is reported to exist in the 'Repair Archive' functionality of WinRAR.

The details of this vulnerability are not known; this BID will be updated as further information in regards to this vulnerability becomes available.

Exploit / POC

RARLAB WinRAR Repair Archive Undisclosed Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

RARLAB WinRAR Repair Archive Undisclosed Vulnerability

Solution:
The vendor has released an update to address this vulnerability:

RARLAB WinRar 2.90